Privacy Policy
PKMega is committed to handling your personal information with care, transparency and respect. This Privacy Policy explains in plain terms what data we collect, why we collect it, how it is used and stored, and what rights you hold over your information. Please read it carefully alongside our Terms & Conditions.
Effective Date: 1 January 2026 | Last Reviewed: 1 January 2026
This policy applies to all users of PKMega, including users accessing the platform from Pakistan.
How We Protect Your Data
A plain-English summary of our key privacy commitments. These cards do not replace the full policy — please read the complete document below.
End-to-End Encryption
All data transmitted between your device and PKMega is protected by industry-standard SSL/TLS encryption. Your login credentials, payment details and personal documents are never transmitted in plaintext.
No Data Sales — Ever
PKMega does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. Your information is used only to operate the platform and meet legal obligations.
Your Rights Are Real
You have the right to access, correct, restrict, port or request deletion of your personal data. Requests are handled within 30 days. Contact our support team to exercise any of these rights.
Secure KYC Document Handling
Identity documents — including CNIC copies and passport scans — are processed through secure HTTPS verification flows only. Documents are never requested via unsecured chat, WhatsApp or email.
Transparent Cookie Use
We use only essential, functional and analytics cookies. We do not use invasive tracking cookies or fingerprinting technologies. Our cookie categories and purposes are fully explained in this policy.
Defined Retention Periods
We do not keep your data indefinitely. Retention periods are set according to the purpose of collection and any applicable legal obligations. Account data is typically retained for the period required by the operator's licensing jurisdiction.
1 Introduction
This Privacy Policy ("Policy") describes how PKMega ("we", "us", "our") collects, uses, stores, protects and discloses personal data relating to individuals ("you", "User", "Data Subject") who access or use the PKMega platform at pkmega.cam.
PKMega is an online sports betting and casino information platform serving Pakistani players. We take the protection of your personal data seriously and operate in accordance with the data protection principles applicable to our licensing jurisdiction. Where international data protection frameworks — including but not limited to the General Data Protection Regulation (GDPR) — may be relevant, we apply their principles as a baseline standard of care.
By accessing PKMega or creating an Account, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not use the Platform.
Pakistan context: While Pakistan's Personal Data Protection Bill is under legislative development, PKMega applies internationally recognised data protection standards regardless of jurisdictional requirements. This policy does not constitute legal advice. Users in Pakistan are encouraged to be aware of applicable national privacy-related legislation.
2 Definitions
For the purposes of this Policy, the following definitions apply:
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, CNIC details, IP address and payment information.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure and deletion.
- "Data Controller" means PKMega and/or the Operator, who determine the purposes and means of processing your Personal Data.
- "Data Processor" means any third party that processes Personal Data on behalf of PKMega under a data processing agreement.
- "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
- "KYC Documents" means identity and address verification documents including CNIC, passport, utility bills and selfie/liveness checks submitted for account verification.
- "Cookies" means small text files placed on your device by the Platform to store session, preference and analytics data.
- "Sensitive Data" means a subset of Personal Data carrying higher protection requirements, including financial account information, government-issued identity numbers and health-related information.
3 Data We Collect
3.1 Registration Data
When you create an Account, we collect information you provide directly:
- Full legal name as per your identity document.
- Date of birth (for age verification — 18+ or higher as required by the operator's licensing jurisdiction).
- Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar).
- Email address and mobile phone number.
- Username and encrypted password hash.
- Preferred currency (PKR where applicable).
3.2 KYC / Identity Verification Data
To comply with age verification and anti-money laundering (AML) obligations, we may collect:
- Scanned copies or photographs of your CNIC (both sides) or international passport.
- Proof of address documents (utility bill, bank statement — typically dated within the last three months).
- Selfie or liveness check images confirming document ownership.
- Payment method verification confirmations (e.g., confirming ownership of an Easypaisa, JazzCash or bank account used for deposits).
3.3 Transaction Data
We record details of all financial transactions, including deposits, withdrawals, wagers placed and bonuses claimed. Transaction records include amounts in PKR or other currencies, timestamps and payment method references. Full payment card or bank account numbers are not stored on PKMega servers.
3.4 Technical & Usage Data
We automatically collect certain technical information when you use the Platform:
- IP address and approximate geolocation data.
- Device type, operating system and browser version.
- Pages visited, session duration, click paths and feature usage patterns.
- Login timestamps and session activity logs.
3.5 Communications Data
If you contact our support team via live chat or email, we retain records of those communications including the content of messages, timestamps and the resolution outcome. This data is used for quality assurance, dispute resolution and training purposes.
4 Legal Basis for Processing
We process your Personal Data on one or more of the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (the Terms & Conditions you accepted) |
| KYC / identity verification | Legal obligation (AML, age verification requirements under the operator's licence) |
| Processing deposits and withdrawals | Performance of a contract |
| Fraud detection and security monitoring | Legitimate interests (protecting the Platform and other users from harm) |
| Platform analytics and improvement | Legitimate interests (improving service quality) |
| Responsible gambling monitoring | Legal obligation and legitimate interests (player protection) |
| Marketing communications (where applicable) | Consent (you may withdraw at any time) |
| Retention of records for regulatory compliance | Legal obligation (applicable to the operator's licensing jurisdiction) |
5 How We Use Your Data
PKMega uses your Personal Data for the following purposes:
- Account creation and authentication: To register your Account, verify your identity and enable secure login.
- Age and eligibility verification: To confirm that you meet the minimum age requirement (18+ or higher as required) and that your participation complies with applicable terms.
- Payment processing: To facilitate deposits and withdrawals via the payment methods available on the Platform, including references to familiar Pakistani payment infrastructure such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These providers do not endorse or support gambling.
- Responsible gambling compliance: To monitor betting patterns, enforce self-imposed limits and respond to responsible gambling tool requests including self-exclusion.
- Fraud prevention and AML: To detect suspicious activity, prevent financial crime and fulfil anti-money laundering reporting obligations where applicable under the operator's licensing framework.
- Customer support: To respond to your queries, resolve disputes and improve our support processes.
- Platform improvement: To analyse how the Platform is used and make data-informed improvements to user experience, performance and security.
- Legal compliance: To meet obligations imposed by the operator's licensing jurisdiction and applicable international standards.
- Marketing (with consent only): To send promotional offers, bonus notifications and relevant platform updates where you have expressly opted in. You may withdraw marketing consent at any time.
6 Data Sharing & Disclosure
PKMega does not sell, rent or trade your Personal Data. We may share your data with the following categories of recipients under strictly controlled circumstances:
- The Operator: The licensed entity operating the gambling services on this Platform. The Operator processes your data as co-Data Controller or Data Processor as applicable.
- KYC and identity verification service providers: Third-party identity verification platforms that process your KYC documents on our behalf under data processing agreements. These providers are contractually prohibited from using your data for any purpose other than the verification service.
- Payment processors: Payment gateway and wallet service providers necessary to process your transactions. These include providers whose infrastructure may reference familiar Pakistani payment rails. Only the minimum data necessary for transaction completion is shared.
- Fraud detection and AML service providers: Third-party risk and compliance services used to screen transactions and identify suspicious patterns.
- Regulatory and law enforcement authorities: Where legally required by a court order, regulatory directive or law enforcement request under applicable law, PKMega may disclose your data to competent authorities. We will notify you of such disclosures where legally permitted to do so.
- Professional advisers: Legal, accounting and auditing advisers who are bound by confidentiality obligations.
What we will never do: PKMega will never sell your Personal Data to advertisers, data brokers or marketing agencies. We will never share your CNIC details, passport information or financial records with any third party except as strictly described above.
7 International Data Transfers
PKMega and its service providers may process your Personal Data in countries other than Pakistan. Where data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, which may include:
- Standard contractual clauses approved by relevant data protection authorities.
- Data processing agreements with processors that commit to internationally recognised data protection standards.
- Transfers to jurisdictions with adequacy decisions or equivalent protective frameworks where applicable.
By using PKMega and accepting this Policy, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan.
8 Data Retention
We retain your Personal Data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law and the operator's licensing obligations. Key retention principles include:
- Active Account data: Retained for the duration of your Account and for a reasonable period thereafter to allow dispute resolution.
- KYC documents: Retained for the period required by the operator's AML and licensing obligations — typically a minimum of five years from account closure, unless a longer period is required by law.
- Transaction records: Retained for a minimum of five years for AML and audit purposes, in line with industry standard financial record-keeping requirements.
- Support communications: Retained for up to three years for dispute resolution and quality assurance purposes.
- Marketing data: Retained only while you have given active consent. Withdrawn consent results in removal from marketing lists within 30 days.
When data is no longer required, it is securely deleted or anonymised so that it cannot be linked to any individual.
9 Cookies & Tracking Technologies
9.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They enable the Platform to remember your preferences, maintain your session and analyse usage patterns to improve performance.
9.2 Categories of Cookies We Use
| Category | Purpose | Required? |
|---|---|---|
| Maintain your login session, remember language preference and support basic Platform functionality. Cannot be disabled without breaking core features. | Yes | |
| Remember your display preferences, odds format and responsible gambling limit settings across sessions. | Optional | |
| Collect anonymised data on page visits, session duration and feature usage to help us understand how the Platform is used and where improvements are needed. Data is not linked to individual identities. | Optional |
9.3 Managing Cookies
You can manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from using core Platform features, though some personalisation features may be affected. PKMega does not use third-party advertising cookies or behavioural tracking technologies.
10 Security Measures
PKMega implements technical and organisational security measures proportionate to the risk associated with the data we process. These include:
- SSL/TLS encryption for all data in transit between your device and our servers.
- Encryption of sensitive data at rest, including identity documents and financial records.
- Access controls limiting Personal Data access to authorised personnel on a need-to-know basis.
- Regular security reviews and vulnerability assessments of platform infrastructure.
- Two-factor authentication options for user accounts to reduce unauthorised access risk.
- Incident response procedures to identify, contain and notify affected users of data breaches where required by law.
Despite our best efforts, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your Account credentials and should contact us immediately if you suspect any unauthorised access.
11 Your Rights
Subject to applicable law, you have the following rights in relation to your Personal Data held by PKMega. To exercise any of these rights, contact our support team — details in Section 15.
Right of Access
You have the right to request a copy of the Personal Data we hold about you, along with information about how it is processed, who it has been shared with and how long it will be retained.
Right to Rectification
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. For KYC-verified data, you may be required to provide updated documents.
Right to Erasure ("Right to be Forgotten")
You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you withdraw consent or where processing was unlawful. Note that certain data must be retained to satisfy legal obligations (e.g., AML transaction records) and cannot be deleted on request.
Right to Restrict Processing
You may request that we pause processing of your data in certain circumstances — for example, while the accuracy of data is contested or while you object to processing based on legitimate interests.
Right to Data Portability
Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used and machine-readable format.
Right to Object
You have the right to object to processing of your Personal Data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may be able to demonstrate compelling grounds that override your objection in certain cases.
Response time: We will respond to all valid data rights requests within 30 calendar days of receipt. For complex or multiple requests, we may extend this period by up to a further 60 days and will notify you of the extension. Requests must be verified to confirm the identity of the requester before action is taken.
12 Children's Privacy
PKMega is strictly an adults-only platform. We do not knowingly collect Personal Data from any individual under the age of 18 — or the higher minimum age required by the operator's licensing jurisdiction. Age verification is mandatory during account registration and may be requested at any subsequent stage.
If we discover or are notified that we have inadvertently collected Personal Data from an underage individual, we will immediately suspend the associated Account, delete the relevant data and, where required, notify the appropriate authority. If you believe a minor has registered on PKMega, please contact our support team immediately.
13 Third-Party Links
The PKMega Platform may contain references to third-party content or services. PKMega does not control the privacy practices of any third-party website or service, and this Policy does not apply to any external site. We encourage you to review the privacy policies of any third-party services you access independently of this Platform.
Payment provider names — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah, BTC and USDT — are referenced on PKMega as familiar Pakistani payment infrastructure examples only. These providers have their own privacy policies governing data you share with them directly during transaction processing.
14 Policy Amendments
PKMega reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email notification or a prominent on-Platform notice at least seven (7) days before the effective date. Non-material clarifications may be updated without advance notice.
The "Last Reviewed" date at the top of this page reflects the most recent version. Your continued use of PKMega following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree to the amended Policy, you should close your Account before the effective date.
15 Contact & Data Requests
To exercise your data rights, report a privacy concern or ask questions about this Policy, please contact the PKMega support team through the following channels:
- Live Chat: Available 24/7 as provided by the operator. Accessible from within the Platform. Recommended for urgent responsible gambling and account security concerns.
- Email (plain text — not a link): [email protected]
- Email Response Time: Within 24 hours on business days for general queries. Data rights requests are handled within 30 calendar days.
When submitting a data rights request by email, please include your registered Account name and a description of your request. We will verify your identity before processing any access, rectification or erasure request.
PKMega serves users across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. Support is available in English; Urdu-language assistance is available on request.
Questions About Your Privacy?
Our support team handles all data rights requests, privacy queries and security concerns. You can also review our Terms & Conditions or browse our FAQ for broader platform guidance.
Adults 18+ only. Gambling involves financial risk. Please play responsibly and know your applicable local law.